OD: 10.5.6, AD: 2003

[MCSDmike]

Ok, FNG here, I will want to write an idiots guide to setting up this Golden Triangle. I will be posting Visio Jpegs to help clear up accuracy and understanding, as well as screenshots.

Assume the following:
DirectoryService:Version:Name:IP
AD:2003:ADC:192.1.1.2
OD:10.5.6:ODC:192.1.1.3

ADC is the current DHCP/DNS/Fileserver/AD for the network.
ODC is configured for OD:Connect to a Directory system
ODC Directory utility has a Valid Bind for AD
Mac clients are standalone 3 user cleints which log in to the ODC on a per user basis no scripting.

Goal:
AD will be the grand repository for all Users & Groups.
ODC will control computer group permissions for all client macs
Mac Clients will login via usernam & password permissions and auto mount the home volume in the AD via the UNC homepath from AD
Mac Clients will be able to be imaged and deployed with all settings ready to go.

Eventual Goal:
Replace 2003 with 2008

What I’ve accomplished so far:
ADC: Users & groups are production and active
ODC: bound via the Directory Utility to AD
ODC: tested bind via logging in (on the ODC) with Ad administrator user, auto mounted the home vol on desktop.
ODC: tested bind via logging in (on the ODC) with regular user: failed
ODC: Opendirectory under the AdminServices is white not green
MacClient: Not sure whether or not to bind to ODC or ADC

[MCSDmike]

Trying to post screen grabs. i need a Mod or Admin help?

[MCSDmike]

I have posted my screen grabs to my photobucket account, however when trying to direct link it detects spam and kills my post.

the other user is a non-admin AD user. the expectation is that all users will be controlled through AD.

[mgb123]

I appreciate you guys taking the initiative to do a how to guide. You might find it helpful to have a look at Mike Bombich’s current AD/OD integration doc as well.

[MCSDmike]

Ok going to try posting this again: these are the photos from the ODC setup. I need the next step to getting the client for the MacClient configured.

General Server info
http://i662.photobucket.com/albums/uu342/mcsdmike/Serverinfo.png

Directory Utility:
http://i662.photobucket.com/albums/uu342/mcsdmike/DU.png

DU-UserExperiance
http://i662.photobucket.com/albums/uu342/mcsdmike/DU.png

DU-Mappings
http://i662.photobucket.com/albums/uu342/mcsdmike/DU-Mappings.png

DU-Administrative
http://i662.photobucket.com/albums/uu342/mcsdmike/DU-Administrative.png

OpenDirectory Service:
http://i662.photobucket.com/albums/uu342/mcsdmike/OD-Geninfo.png

OD-LDAP
http://i662.photobucket.com/albums/uu342/mcsdmike/OD-Geninfo.png

OD-Policy: Passwords
http://i662.photobucket.com/albums/uu342/mcsdmike/OD-Policy-Pass.png

OD-Policy: Binding
http://i662.photobucket.com/albums/uu342/mcsdmike/OD-Policy-Bind.png

OD-Policy: Authentication
http://i662.photobucket.com/albums/uu342/mcsdmike/OD-Policy-Auth.png

Visio Docs to come.

[MCSDmike]

ok, I’ve got the mac client authenticating via active directory, I haven’t been able to get the OD part of it from the mac server help???

[musox]

MCSDmike,

I’m using the AD-OD Sandbox documentation located at: https://www.afp548.com/article.php?story=20080304215842264

One thing I found when trying to bind AD is that the directions for “binder” having Computer permissions doesn’t seem to work (full updates for w2k3 R2 and 10.5.6 as of today). I had to restort to using the Administrator un/pw.

One thing I cannot remember for OSXS if the directions are correct in that ODM should be created first prior to AD Binding, or vica versa. I may be confusing Client steps…

[Author]

Posts